CVE-2006-6120

MEDIUM 6.8CVE-2006-6120 · Published 03/12/2006 · updated 16/06/2026

In short

CVE-2006-6120 is a MEDIUM (CVSS 6.8) vulnerability affecting koffice (kde).
Chance of exploitation in the next 30 days (EPSS): 4.5%, higher than 91.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
koffice kde	`= 1.6.1`	No fix yet

Description

Integer overflow in the KPresenter import filter for Microsoft PowerPoint files (filters/olefilters/lib/klaola.cc) in KOffice before 1.6.1 allows user-assisted remote attackers to execute arbitrary code via a crafted PPT file, which results in a heap-based buffer overflow.

References

secunia.com/advisories/23143 · Vendor Advisory
secunia.com/advisories/23162 · Vendor Advisory
secunia.com/advisories/23220
secunia.com/advisories/23409
secunia.com/advisories/24218
security.gentoo.org/glsa/glsa-200612-05.xml
securitytracker.com/id
websvn.kde.org/branches/koffice/1.6/koffice/filters/olefilters/lib/klaola.cc · Patch
kde.org/info/security/advisory-20061204-1.txt
koffice.org/announcements/changelog-1.6.1.php · Patch
mandriva.com/security/advisories
novell.com/linux/security/advisories/2006_29_sr.html
redhat.com/support/errata/RHSA-2007-0010.html

More vulnerabilities in koffice

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free